All information collected by Keloa Eyewear Oy is in accordance with Finnish Personal Data Act (10 and 24) and EU General Data Protection Regulation (GDPR). This policy was composed 28.10.022. Latest update 28.1.2023.
Keloa Eyewear Oy
FI32859017
Sarviniementie 72 A
99560 Orakylä
+358 50 301 2809
Contact person regarding the policy: Laura Knuuti, [email protected], +358 50 301 2809
According to the EU’s General Data Protection Regulation, the legal basis for processing personal data is the collector’s legitimate right before the customer relationship is established. By contacting the person, the person gives their consent to providing their contact register information. The purpose of processing personal data is to communicate with customers.
Information collected are
- Representation (business/private person)
- Name
- Email address
- Phone number
- Other information shared in the contact form, email or other discussion channel
We do not keep your personal data longer than necessary for purposeful use or as required by contract or law. However, data retention may vary depending on the purpose of use. IP addresses of website visitors and cookies necessary for the operation of the service are processed on the basis of a legitimate interest, e.g. to take care of information security and for the collection of statistical data of website visitors in those cases when they can be considered as personal data. If necessary, consent is requested separately for third-party cookies. Cookies can also collect information about your visit, e.g. pages viewed, duration of visit, IP address, purchases made and demographic information such as location, gender and age.
The information to be saved in the register is obtained from the customer, e.g. from messages sent via website contact form, by email or phone, via social media services, contracts, customer meetings and other situations where the customer gives out their information. If necessary, information may be collected from companies’ and other organizations’ public sources such as websites, directory services and other companies.
Information is not shared to other parties. However, information can be shared to our partners, e.g. for logistical needs. Data is processed only by people whose job description demands it.
Every person in the register has the right to check their information stored in the register and to demand the correction of any incorrect information or the completion of incomplete information. If a person wants to check the information stored about him or demand a correction, the request should be sent by email to the controller. If necessary, the controller can ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).
A person in the register has the right to request the removal of personal data about him from the register (“the right to be forgotten”). The registered also have other rights according to the EU’s General Data Protection Regulation, such as limiting the processing of personal data in certain situations. Requests should be sent by e-mail to the controller. If necessary, the controller can ask the requester to prove his identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).